Vulnerabilities of Red Hat Red Hat Enterprise Linux AppStream (v. 10)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-42258	Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby	5.8 Medium	May 9, 2026
CVE-2026-42246	Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby	7.6 High	May 9, 2026
CVE-2026-43329	In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum…	7.8 High	May 8, 2026
CVE-2026-43284	In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb…	8.8 High	May 8, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-8094	Other issue in the WebRTC component	9.8 Critical	May 7, 2026
CVE-2026-8092	Memory safety bugs present in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1	8.1 High	May 7, 2026
CVE-2026-8090	Use-after-free in the DOM: Networking component	7.3 High	May 7, 2026
CVE-2026-42010	Gnutls: gnutls: authentication bypass via nul character in username	7.1 High	May 7, 2026
CVE-2026-42216	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.8 High	May 7, 2026
CVE-2026-41142	OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for…	8.8 High	May 7, 2026
CVE-2026-43198	In the Linux kernel, the following vulnerability has been resolved: tcp: fix potential race in tcp_v6_syn_recv_sock()…	9.8 Critical	May 6, 2026
CVE-2026-43112	In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in…	8.8 High	May 6, 2026
CVE-2026-28780	Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server	Not rated	May 5, 2026
CVE-2026-25243	Redis is an in-memory data structure store	7.7 High	May 5, 2026
CVE-2026-23631	Redis is an in-memory data structure store	6.1 Medium	May 5, 2026
CVE-2026-23479	Redis is an in-memory data structure store	7.7 High	May 5, 2026
CVE-2026-42154	Prometheus is an open-source monitoring system and time series database	7.5 High	May 4, 2026
CVE-2026-42151	Prometheus is an open-source monitoring system and time series database	7.5 High	May 4, 2026
CVE-2026-43964	Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash…	3.7 Low	May 4, 2026
CVE-2026-33846	Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly	7.5 High	May 4, 2026
CVE-2026-37459	An integer underflow in FRRouting (FRR) stable/10.0 to stable/10.6 allows attackers to cause a Denial of Service (DoS)…	7.5 High	May 4, 2026
CVE-2026-43037	In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar…	9.8 Critical	May 1, 2026
CVE-2026-43038	In the Linux kernel, the following vulnerability has been resolved: ipv6: icmp: clear skb2->cb[] in…	9.8 Critical	May 1, 2026
CVE-2026-31709	In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before…	8.8 High	May 1, 2026

Other Red Hat products